Although many organizations still use Excel 4.0 (XLM) macros for automation activities, Microsoft has been encouraging a transition to the more secure Visual Basic for Applications (VBA) for a long time. This is because macros are often abused by malicious actors to inject malware into enterprise systems, so their continued use promotes a relatively accessible attack surface. Microsoft tried to address this issue to some extent by introducing runtime checks for XLM macro code in March 2021, and today, it's taking another step forward.
#Microsoft has now announced that it will restrict the use of XLM macros by default for customers using Excel. This is something the company had hinted at back in July 2021, and the change is now being rolled out publicly. By default, the Excel Trust Center option for using macros indicates that the language is disabled.
That said, IT admin organizations will apparently still be able to modify default behavior using Group Policy, Cloud Policy, and ADMX Policy, all of which are described in Microsoft's blog post.
The new default configuration is now rolling out for the following customers:
In short, for the September fork version 16.0 .14527.20000 and above. IT admins can also choose to completely disable the use of existing and new XLM macros across their entire organization to enhance security, and if you're managing your organization's security, you should probably check out Microsoft's blog post here .
The above is the detailed content of Microsoft now limits XLM macros in Excel by default. For more information, please follow other related articles on the PHP Chinese website!
![[Web front-end] Node.js quick start](https://img.php.cn/upload/course/000/000/067/662b5d34ba7c0227.png)
